High
CVE-2021-33587
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-33623
Uncontrolled Resource Consumption in trim-newlines
Medium
CVE-2021-23388
Regular expression denial of service in forms
Critical
CVE-2021-26707
Prototype pollution in Merge-deep
High
CVE-2020-28469
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex
Critical
CVE-2021-25947
Prototype pollution in nestie
Critical
CVE-2021-32671
XSS vulnerability with translator
Medium
CVE-2021-29621
Observable Response Discrepancy in Flask-AppBuilder
Critical
CVE-2017-5929
QOS.ch Logback vulnerable to Deserialization of Untrusted Data
Medium
CVE-2021-24373
WP Hardening – Fix Your WordPress Security <= 1.2.1 - Reflected Cross-Site Scripting
High
CVE-2021-4382
Recently <= 3.0.4 - Arbitrary File Upload to Remote Code Exectution
Medium
CVE-2021-24379
Comments Like Dislike <= 1.1.2 - Add Like/Dislike Bypass
Medium
bb545a42-6c66-412b-a686-e486b0a58dc5
Stripe Payment Plugin for WooCommerce <= 3.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2021-24372
WP Hardening – Fix Your WordPress Security <= 1.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-24382
Smart Slider 3 <= 3.5.0.8 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24383
WP Google Maps <= 8.1.11 - Authenticated Stored Cross-Site Scripting
Medium
198e8f56-5354-4e5d-af51-54e95d34e25c
Recently <= 3.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24364
Jannah - Newspaper Magazine News BuddyPress AMP < 5.4.4 - Reflected Cross-Site Scripting
High
CVE-2021-33880
Observable Timing Discrepancy in aaugustin websockets library
Critical
CVE-2020-24186
Comments - wpDiscuz 7.0 - 7.0.4 - Unauthenticated Arbitrary File Upload leading to Remote Code Execution
High
CVE-2017-18640
SnakeYAML Entity Expansion during load operation
Medium
CVE-2020-10693
Improper Input Validation in Hibernate Validator
High
CVE-2021-32641
Reflected XSS when using flashMessages or languageDictionary
Medium
CVE-2021-32660
Script injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.